Hash IP address, lazy fetch, narrow exception

- SHA256 hash (first 16 chars) instead of raw IP for privacy
- Lazy fetch on first telemetry event (not at construction)
- Catch RequestException only, not all exceptions

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: matin

src/garth/telemetry.py

@@ -123,19 +123,24 @@ class Telemetry(BaseSettings):
 
     def model_post_init(self, __context):
         self._attached_sessions = set()
-        self._public_ip = (
-            self._fetch_public_ip() if self.enabled else "disabled"
-        )
+        self._ip_hash: str | None = None
+
+    @property
+    def ip_hash(self) -> str:
+        if self._ip_hash is None:
+            self._ip_hash = self._fetch_ip_hash()
+        return self._ip_hash
 
     @staticmethod
-    def _fetch_public_ip() -> str:
+    def _fetch_ip_hash() -> str:
+        import hashlib
+
         try:
-            import requests as _requests
+            import requests as _req
 
-            return _requests.get(
-                "https://api.ipify.org", timeout=3
-            ).text.strip()
-        except Exception:
+            ip = _req.get("https://api.ipify.org", timeout=3).text.strip()
+            return hashlib.sha256(ip.encode()).hexdigest()[:16]
+        except _req.RequestException:
             return "unknown"
 
     def _default_callback(self, data: dict):
@@ -158,7 +163,7 @@ def _response_hook(self, response: Response, *args, **kwargs):
             data = {
                 "session_id": self.session_id,
                 "garth_version": __version__,
-                "public_ip": self._public_ip,
+                "ip_hash": self.ip_hash,
                 "method": request.method,
                 "url": request.url,
                 "status_code": response.status_code,

tests/test_telemetry.py

@@ -83,6 +83,7 @@ def capture_callback(data):
     )
 
     assert authed_client.telemetry.enabled is True
+    authed_client.telemetry._ip_hash = "test"
 
     profile = authed_client.connectapi("/userprofile-service/socialProfile")
     assert profile is not None